0d6cc3ec3b
Assistant: codex Assistant-Model: gpt-6-astra Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6
18 lines
628 B
YAML
18 lines
628 B
YAML
- hosts: all
|
|
become: true
|
|
vars_files:
|
|
- ../inventory/group_vars/all.yaml
|
|
roles:
|
|
- role: base
|
|
tags: [base]
|
|
- role: railiance_clock
|
|
tags: [clock]
|
|
- role: sops_agent
|
|
tags: [sops]
|
|
- role: custodian_agent # injects ~/.ssh/id_custodian_agent.pub into authorized_keys
|
|
tags: [custodian_agent]
|
|
- role: swapfile # provisions swap file (size + swappiness from host_vars)
|
|
tags: [swap]
|
|
- role: resource_limits # nproc PAM caps + systemd user slice memory limits
|
|
tags: [resource_limits]
|
|
# - role: wireguard # enable if you configure WireGuard variables
|